
Privacy Policy
How TukTuk Tour collects, uses and protects your personal data when you visit tuktuktourmadrid.com, message us or ride with us in Madrid. Written in plain English, under the EU General Data Protection Regulation (GDPR) and Spain's data protection law (LOPDGDD).
Last updated: 26 October 2026
In short: we only collect what we need to answer you and run your tour: your name, contact details, tour date, group size and pickup address. We use it to confirm and run your booking, never sell it, and don't take card payments. Analytics cookies are only used with your consent. You can ask us to see, correct or delete your data at any time by writing to madridontuktour@gmail.com.
Who we are
Who Is Responsible for Your Data
The data controller, the business that decides how your data is used, is TukTuk Tour, which runs private tuk tuk tours in Madrid and this website.
- Business: TukTuk Tour
- Address: Calle de Vergara 1, Plaza de Isabel II, 28013 Madrid, Spain
- Email: madridontuktour@gmail.com
- Phone and WhatsApp: +34 603 831 819
- Website: tuktuktourmadrid.com
What and why
What We Collect and Why
This is every situation in which we handle personal data, what we collect, why, and the legal basis under the GDPR.
| When | Data | Why | Legal basis |
|---|---|---|---|
| You message us on WhatsApp, by phone or email | Name, phone number, email, your messages | To answer you and arrange your tour | Steps before a contract (Art. 6.1.b) |
| You book a tour | Date, time, tour, group size, language, hotel or pickup address, any needs you tell us about | To confirm, plan and run your tour | Contract (Art. 6.1.b) |
| You use the contact form | Name, email, phone, number of people, tour, preferred date, your message | To reply and prepare your booking | Steps before a contract (Art. 6.1.b) |
| You pay on the day | Amount paid, date, and invoice details if you ask for one | Accounting and tax records | Legal obligation (Art. 6.1.c) |
| You browse the website | IP address, device, browser, pages visited, cookies | To run, secure and improve the site | Legitimate interest (Art. 6.1.f); consent for non-essential cookies (Art. 6.1.a) |
| You agree to hear from us | Email or phone number | Occasional news or offers | Consent (Art. 6.1.a), which you can withdraw at any time |
We don't ask for sensitive data. If you choose to tell us about a mobility need or a health condition so we can plan your tour, we use it only for that, with your consent.
Booking and the tour
WhatsApp, Email and the Day of Your Tour
Most bookings are made on WhatsApp. When you message us, WhatsApp (WhatsApp Ireland Ltd, part of Meta) processes your number and messages under its own privacy policy. We keep the chat only as long as we need it to handle your booking and any follow-up.
If you write by email, your message is stored in our Gmail account (Google).
On the day, your driver-guide only sees what's needed to run your tour: your name, the pickup point, the time and the size of your group. If your guide takes photos for you, they're taken on your phone.
We don't take card payments. You pay in cash on the day, so we never ask for or store card or bank details.
Cookies
Cookies and Analytics
Cookies are small files your browser stores. We use as few as we can.
| Type | What it does | Examples | Needs your consent? |
|---|---|---|---|
| Essential | Keeps the site working and secure, remembers your cookie choice, speeds up pages | WordPress, the cookie banner, the LiteSpeed cache | No |
| Analytics | Counts visits and shows which pages are useful, in aggregate | Google Analytics (via Google tag / Google Site Kit) | Yes |
| Advertising | Measures whether our ads lead to bookings | Google Ads conversion tags, when active | Yes |
| Embedded content | Shows maps and other content from other sites | Google Maps on our meeting-point page | Set by the provider when you use it |
You can accept or refuse non-essential cookies in the cookie banner, change your choice at any time, or block and delete cookies in your browser settings. Refusing analytics cookies doesn't stop you using the site or booking a tour.
Links to our social media pages (Facebook, Instagram, TikTok and others) are plain links. Those sites only collect data if you click through to them, under their own policies.
Sharing
Who We Share Your Data With
We don't sell or rent your data. We share it only with the providers we need, under contracts that protect it, or when the law requires it.
| Who | What for |
|---|---|
| Hostinger | Website hosting and delivery |
| Google (Gmail, Analytics, Maps, Ads) | Email, website statistics, maps, ad measurement |
| WhatsApp (Meta) | Booking messages |
| Our driver-guides | Running your tour |
| Our accountant or tax adviser | Accounting and tax returns |
| Public authorities | Only when the law requires it |
Some of these providers may process data outside the European Economic Area, for example in the USA. When they do, it is protected by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
Retention
How Long We Keep Your Data
| Data | How long |
|---|---|
| Messages, enquiries and contact form entries | As long as we need them to answer you, then deleted or anonymized |
| Booking details | As long as we need them to run your tour and handle any follow-up |
| Invoices and accounting records | As long as Spanish tax and commercial law requires |
| Analytics data | In aggregate, for the period set in Google Analytics |
| Marketing consent | Until you withdraw it |
Your rights
Your Rights and How to Use Them
You can exercise any of these rights for free by emailing madridontuktour@gmail.com or messaging us on WhatsApp. We may ask you to confirm your identity, and we'll reply within one month.
Access
Ask what data we hold about you and get a copy.
Correction
Ask us to fix anything that's wrong or incomplete.
Deletion
Ask us to delete your data, unless the law requires us to keep it.
Restriction and objection
Ask us to limit how we use your data, or object to uses based on our legitimate interest.
Portability
Get your data in a common format to take elsewhere.
Withdraw consent
Change your mind about cookies or marketing at any time.
If you're not happy with our answer, you can complain to the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, at aepd.es.
Also
Security, Children and Changes to This Policy
Security
The website uses an encrypted HTTPS connection, and only our team can see booking messages and form entries.
Children
Children are welcome on our tours with an adult, but bookings are made by adults. We don't knowingly collect data from children under 14.
Changes
We'll update this page if the way we handle data changes. The date at the top shows the latest version.
Private tours, every day
Questions About Your Data?
Message us on WhatsApp or email madridontuktour@gmail.com. A real person from our Madrid team will answer.
Do you sell my personal data?
No. We never sell or rent your data. We only share it with the services we need to run bookings and the website, listed on this page.
Do you store my card details?
No. You pay in cash on the day of the tour, so we never ask for or store card details.
How do I delete my data?
Email madridontuktour@gmail.com or message us on WhatsApp and ask us to delete it. We'll reply within one month. We may have to keep some records, such as invoices, for as long as Spanish tax law requires.
Can I turn off analytics cookies?
Yes. Non-essential cookies are only used with your consent, and you can withdraw it at any time through the cookie settings on the site or in your browser.
Who can I complain to?
Tell us first and we'll try to fix it. You can also complain to Spain's data protection authority, the Agencia Española de Protección de Datos (AEPD), at aepd.es.